Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

Summary

An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.

Remediation

1. Inventory every Hewlett Packard Enterprise (HPE) ArubaOS (AOS) deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US